Cn Financial Notes Extraction

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 17, 2026, 2:15 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and instructions match its stated purpose (extracting tables from Chinese annual-report PDFs) and it is an instruction-only skill with no requested credentials, but it advises running on the host Python environment (not sandbox) which raises an operational safety consideration.

This skill is coherent with its description and doesn't request secrets, but it tells the agent to run on the host Python environment rather than in a sandbox. Before installing or running: (1) prefer executing the extraction in an isolated environment (container or VM) to limit risk from malicious or malformed PDFs and third-party OCR binaries; (2) review and test the exact Python code you run and only install pdfplumber / Tesseract from trusted sources; (3) avoid giving the agent broad host filesystem or network access—limit it to the directories and network endpoints needed to fetch known PDF sources; (4) if you cannot run in isolation, treat the 'run on host' instruction as a reason to be cautious. If you want higher assurance, ask the skill author for a signed/reviewable code implementation or run the provided extraction logic yourself in a controlled environment.